Oracle: Security Advisory (ELSA-2012-1459)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-313-1 : virtualbox-ose security update

The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Thanks to Gianfranco Costamagna for preparing packages for review and upload by the Debian LTS Team. Unfortunately, Oracle no longer provides information on specific...

[SECURITY] [DLA 313-1] virtualbox-ose security update

Package : virtualbox-ose Version : 3.2.28-dfsg-1+squeeze1 CVE ID : CVE-2013-3792 CVE-2014-2486 CVE-2014-2488 CVE-2014-2489 CVE-2015-2594 Bugs : 715327 754939 792446 The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Than...

DLA-313-1 virtualbox-ose - security update

Bulletin has no description...

Memory corruption

Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490,...

CVE-2015-2486

CVE-2015-2486 affects Microsoft Internet Explorer 7–11 and Microsoft Edge. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption. Connected documents corroborate a MS15-095-related fix in Edge/IE and refe...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2486)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory . A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2486-1) (POODLE)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,...

Ubuntu: Security Advisory (USN-2486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2486

CVE-2014-2486 is described as an unspecified vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization VirtualBox, affecting versions prior to 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12. The impact scope is local integrity/availability via unknown vectors related to Core. The c...

KLA10284 Multiple vulnerabilities in Oracle VirtualBox

Unspecified vulnerabilities were found in Oracle VirtualBox. By exploiting this vulnerability malicious users can affect integrity, availability and confidentiality. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Exploitation Public exploits exist for this...

SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8044 / 8045)

This wireshark version update to 1.8.8 includes several security and general bug fixes. Version update to 1.8.8 bnc824900 : - vulnerabilities fixed : - The CAPWAP dissector could crash. wnpa-sec-2013-32. CVE-2013-4074 - The GMR-1 BCCH dissector could crash. wnpa-sec-2013-33. CVE-2013-4075 - The P...

Oracle Linux 6 : nspluginwrapper (ELSA-2012-1459)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-1459 advisory. 1.4.4-1 - Rebase the package to latest upstream - Added Adobe reader fix 645599 Tenable has extracted the preceding description block directly from the Oracle...

MGASA-2013-0168 Updated wireshark packages fix security vulnerabilities (Mageia 3)

The RELOAD dissector could go into an infinite loop CVE-2013-2486, CVE-2013-2487. The GTPv2 dissector could crash CVE-2013-3555. The ASN.1 BER dissector could crash CVE-2013-3557. The PPP CCP dissector could crash CVE-2013-3558. The DCP ETSI dissector could crash CVE-2013-3559. The MPEG DSM-CC...

CVE-2013-2486

The dissectdiagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery aka RELOAD dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service infinite loop via crafted integer...

CVE-2013-2486

Wireshark 1.8.x before 1.8.6 is affected by CVE-2013-2486. The vulnerability exists in the dissect_diagnosticrequest function of the REsource LOcation And Discovery (RELOAD) dissector (epan/dissectors/packet-reload.c), where an incorrect integer data type enables a remote attacker to cause a deni...

CVE-2011-2486

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CVE-2011-2486

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CVE-2011-2486

Summary: CVE-2011-2486 affects nspluginwrapper prior to 1.4.4. The flaw lies in incorrect handling of NPNVprivateModeBool, which can prevent Firefox plugins from correctly determining Private Browsing state, enabling remote attackers to bypass access restrictions (as demonstrated with Flash). Imp...

CentOS Update for nspluginwrapper CESA-2012:1459 centos6

Check for the Version of nspluginwrapper OpenVAS Vulnerability Test CentOS Update for nspluginwrapper CESA-2012:1459 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...